AWS IoT verifies that a client certificate is active when it authenticates a connection.
You can create and register client certificates without activating them so they can't be used until you want to use them. You can also deactivate active client certificates to disable them temporarily. Finally, you can revoke client certificates to prevent them from any future use.
Activate a client certificate (console) To activate a client certificate using the AWS IoT consoleSign in to the AWS Management Console and open the AWS IoT console.
In the left navigation pane, choose Secure, choose Certificates.
In the list of certificates, locate the certificate that you want to activate, and open the option menu by using the ellipsis icon.
In the option menu, choose Activate.
The certificate should show as Active in the list of certificates.
Deactivate a client certificate (console) To deactivate a client certificate using the AWS IoT consoleSign in to the AWS Management Console and open the AWS IoT console.
In the left navigation pane, choose Secure, choose Certificates.
In the list of certificates, locate the certificate that you want to deactivate, and open the option menu by using the ellipsis icon.
In the option menu, choose Deactivate.
The certificate should show as Inactive in the list of certificates.
Activate a client certificate (CLI)The AWS CLI provides the update-certificate command to activate a certificate.
aws iot update-certificate \
--certificate-id certificateId
\
--new-status ACTIVE
If the command was successful, the certificate's status will be ACTIVE
. Run describe-certificate to see the certificate's status.
aws iot describe-certificate \
--certificate-id certificateId
Deactivate a client certificate (CLI)
The AWS CLI provides the update-certificate command to deactivate a certificate.
aws iot update-certificate \
--certificate-id certificateId
\
--new-status INACTIVE
If the command was successful, the certificate's status will be INACTIVE
. Run describe-certificate to see the certificate's status.
aws iot describe-certificate \
--certificate-id certificateId
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4